Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6nPPtGDyNjvukhVR5KD3k8tSzrE.roa
File: 6nPPtGDyNjvukhVR5KD3k8tSzrE.roa (raw, json)
Hash identifier: LSw6b0pTtZlUfIJQErCOlz9sKZ7SIHktcwB6LH/OAJw=
Subject key identifier: EA:73:CF:B4:60:F2:36:3B:EE:92:15:51:E4:A0:F7:93:CB:52:CE:B1
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A6FB4CC366004404A26BAC351FF98D0D7
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6nPPtGDyNjvukhVR5KD3k8tSzrE.roa
Signing time: Thu 07 Sep 2023 12:53:54 +0000
ROA not before: Thu 07 Sep 2023 12:53:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47757
IP address blocks: 195.177.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 16:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:b4:cc:36:60:04:40:4a:26:ba:c3:51:ff:98:d0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 7 12:53:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea73cfb460f2363bee921551e4a0f793cb52ceb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2a:11:24:36:8b:05:bc:9c:c3:46:13:c1:80:
67:9b:12:76:6c:bc:c5:eb:5f:9c:0f:81:0a:8d:37:
40:91:8e:33:c1:51:04:a3:98:14:27:59:e4:3e:e3:
04:39:24:aa:48:58:20:37:04:5e:9c:1f:db:f7:0c:
83:d9:d1:92:7e:c2:d7:83:dc:d2:dd:e9:27:92:65:
0e:bb:7d:2c:90:db:50:80:87:0a:b6:a5:a8:a2:09:
48:f0:63:d0:90:0d:ea:98:2e:2e:ce:d6:ad:b6:34:
12:c1:94:36:03:ba:19:2e:c1:c5:40:af:63:c0:be:
5f:cb:1c:85:cd:07:98:08:b9:19:30:83:a7:07:e8:
e7:cd:ba:f4:0c:d0:34:82:a2:a5:59:d3:fa:87:31:
b7:3d:7a:8f:d7:33:75:4f:50:bf:c7:dc:4c:d9:18:
84:11:82:4c:0c:0b:49:5c:82:61:f2:d9:10:33:c9:
52:3b:8a:c8:80:50:81:88:b3:51:4f:8f:22:20:22:
40:ec:53:83:b7:88:28:53:cd:7a:b9:bc:19:2d:09:
8c:c1:f0:aa:8d:eb:5e:dc:13:47:36:25:ce:ae:2a:
72:b8:be:2d:99:a3:57:63:01:cd:c8:af:11:43:56:
f0:bc:28:a3:e4:f3:2a:cd:6d:2c:79:3e:19:23:45:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:73:CF:B4:60:F2:36:3B:EE:92:15:51:E4:A0:F7:93:CB:52:CE:B1
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6nPPtGDyNjvukhVR5KD3k8tSzrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
15:75:c2:b4:e7:9c:b9:7c:7b:77:a7:f9:8e:65:79:92:5b:89:
92:84:b9:a7:d3:81:e1:08:65:e9:8e:60:f2:bb:4a:f6:9c:ac:
53:20:05:96:8e:b0:e3:50:2a:2b:00:42:36:f3:5f:26:09:e8:
12:e3:53:cb:33:98:ce:3c:77:8a:e0:51:4f:29:62:ee:d3:be:
21:a3:25:c3:b7:3e:5c:68:55:b5:14:34:74:2f:52:34:c6:4e:
0b:0d:9b:5c:b6:e3:8d:95:cf:95:34:68:dc:8f:ee:62:1f:3e:
ce:cf:0a:44:01:01:d7:20:db:89:20:d4:e8:1e:f9:26:a6:08:
02:de:82:ab:6f:55:68:f3:b6:22:05:99:5d:88:26:15:dd:74:
20:fa:9a:3a:c5:5c:c9:10:ac:1b:b6:a3:55:07:f0:f7:77:cc:
51:82:d4:7b:4c:96:0f:b4:ba:fa:39:f1:dd:7c:02:16:80:d1:
d4:a3:6d:16:6e:f0:b6:2b:ac:66:98:af:e5:28:59:19:b1:47:
19:cd:15:92:2e:9a:a5:5c:1d:e6:4a:d1:7a:09:a5:4c:ea:f6:
07:c5:04:27:45:74:57:a9:17:50:ce:1a:44:d4:3d:cd:d9:f1:
35:fd:33:8f:4f:43:67:42:4c:66:d6:8c:ce:50:10:97:71:15:
56:05:18:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpvtMw2YARASia6w1H/mNDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwOTA3MTI1MzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTczY2ZiNDYwZjIzNjNiZWU5MjE1NTFlNGEwZjc5M2NiNTJjZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhioRJDaLBbycw0YTwYBnmxJ2bLzF
61+cD4EKjTdAkY4zwVEEo5gUJ1nkPuMEOSSqSFggNwRenB/b9wyD2dGSfsLXg9zS
3eknkmUOu30skNtQgIcKtqWooglI8GPQkA3qmC4uztattjQSwZQ2A7oZLsHFQK9j
wL5fyxyFzQeYCLkZMIOnB+jnzbr0DNA0gqKlWdP6hzG3PXqP1zN1T1C/x9xM2RiE
EYJMDAtJXIJh8tkQM8lSO4rIgFCBiLNRT48iICJA7FODt4goU816ubwZLQmMwfCq
jete3BNHNiXOripyuL4tmaNXYwHNyK8RQ1bwvCij5PMqzW0seT4ZI0XWSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOpzz7Rg8jY77pIVUeSg95PLUs6xMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvNm5QUHRHRHlOanZ1a2hWUjVLRDNrOHRTenJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7FfMA0G
CSqGSIb3DQEBCwUAA4IBAQAVdcK055y5fHt3p/mOZXmSW4mShLmn04HhCGXpjmDy
u0r2nKxTIAWWjrDjUCorAEI2818mCegS41PLM5jOPHeK4FFPKWLu074hoyXDtz5c
aFW1FDR0L1I0xk4LDZtctuONlc+VNGjcj+5iHz7OzwpEAQHXINuJINToHvkmpggC
3oKrb1Vo87YiBZldiCYV3XQg+po6xVzJEKwbtqNVB/D3d8xRgtR7TJYPtLr6OfHd
fAIWgNHUo20WbvC2K6xmmK/lKFkZsUcZzRWSLpqlXB3mStF6CaVM6vYHxQQnRXRX
qRdQzhpE1D3N2fE1/TOPT0NnQkxm1ozOUBCXcRVWBRg7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org